Security fixes are provided for the most recent published APN release. Older versions should be upgraded before a report is validated against runtime code.

Please privately report a security vulnerability through GitHub private vulnerability reporting. Do not open a public issue for a suspected vulnerability and do not include wallet secrets, credentials, private keys, recovery material or live payment authorization in a report.

Include the affected version or commit, the smallest safe reproduction, impact, and any relevant platform details. Receipt confirms only that the report was received; severity, remediation and release status are communicated separately.